registry / @kaydash9999/banker-plugins / 0.21.0
@kaydash9999/banker-plugins@0.21.0
banker — Claude Code + Codex CLI plugin (QA, audit, docs, architecture, wiki skills). Install via Claude Code marketplace, or `npm i -g @kaydash9999/banker-plugins` then `banker setup`.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged configuration writes occur as part of the user-invoked plugin setup. Runtime usage telemetry is disclosed, limited to version, platform, and aggregated counts, and has documented opt-outs.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs `banker setup` to install Codex hooks; those hooks run on session start and turn stop.
Impact
Expected plugin setup, update checking, and disclosed usage counting; no credential or machine-detail exfiltration identified.
Mechanism
The stop hook records banker skill counts locally. A daily check-in sends version, platform, and aggregated counts; the package documents how to disable it. The GitHub star action requires an interactive prompt.
AI rationale
The flagged configuration writes occur as part of the user-invoked plugin setup. Runtime usage telemetry is disclosed, limited to version, platform, and aggregated counts, and has documented opt-outs.
Evidence
$CODEX_HOME/hooks.json$CODEX_HOME/hooks-custom/banker/~/.config/banker/usage-log~/.config/banker/used-skills.json
Network endpoints3
banker.banker-plugins.workers.devregistry.npmjs.orgraw.githubusercontent.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and a prepublishOnly script, with no install lifecycle hook.
- Codex hooks are added during an explicit `banker setup` command.
- The default Codex hooks handle session start and turn stop; the stop hook records banker skill usage locally.
- The check-in payload contains only package version, platform, and aggregated skill counts; the privacy notice says the local used-skills list is not sent.
- The package discloses daily default-on usage telemetry and documents `BANKER_NO_TELEMETRY` and `banker telemetry off` as opt-outs.
- The GitHub star action is behind an interactive prompt asking the user first.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedbin/banker.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
claude cli not found on path — install claude code first. skipping --claude.'); return false; }
const steps = [
['claude', ['plugin', 'marketplace', 'add', pkg_root]],
['claude', ['plugin', 'install', `${plugin_name}@${marketplace}`]],
];
for (const [bin, args] of steps) {
if (dryrun) { log(` [dry-run] ${bin} ${args.join(' ')}`); continue; }
try { cp.execfilesync(bin, args, { stdio: 'inherit' }); }
catch (e) { warn(` step failed (may already be applied): ${bin} ${args.join(' ')}`); }
}
log(' → skills/commands available as /banker:* (reload-plugins or restart to apply).');
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/banker.jsView on unpkg•matchType = previous_version_dangerous_delta
matchedPackage = @kaydash9999/banker-plugins@0.20.5
matchedIdentity = npm:[redacted]:0.20.5
similarity = 0.931
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/banker.jsView on unpkgFindings
4 High5 Medium6 Low
HighExternal Ai Agent Control Surface Mutationhooks/telemetry-count-codex.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/banker.js
HighSemantic Analysis Limitedcodex/skills/progress/scripts/progress.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltabin/banker.js
MediumDynamic Requirebin/banker.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/audit-web-page/harness.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptoskills/payload-mon/scripts/payload-size.mjs
Low
Affected versions and remediation
This report applies to @kaydash9999/banker-plugins@0.21.0.
See all versions of @kaydash9999/banker-plugins for other recorded verdicts.
- Review the evidence and your use of @kaydash9999/banker-plugins@0.21.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.